medium6.4
CVE-2014-3308
Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption…
Impact
Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka Bug ID CSCun83985.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios Xr | All versions |
| Cisco | Asr 9000 Rsp440 Router | All versions |
| Cisco | Asr 9001 | All versions |
| Cisco | Asr 9006 | All versions |
| Cisco | Asr 9010 | All versions |
| Cisco | Asr 9904 | All versions |
| Cisco | Asr 9912 | All versions |
| Cisco | Asr 9922 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/58869
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3308
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34843
- http://www.securityfocus.com/bid/68351
- http://www.securitytracker.com/id/1030525
- http://secunia.com/advisories/58869
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3308
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34843
- http://www.securityfocus.com/bid/68351
- http://www.securitytracker.com/id/1030525